Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File:                     rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier:          mYiGvWZlm5/6GXiuGWYEXV1PWh2QET78I+rZ+eC7r6g=
Subject key identifier:   5F:8D:71:DB:FC:B4:B9:A9:F1:D2:18:7A:A5:0C:29:A8:DA:87:3C:B0
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer:       /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial:       01974B1F8BFABD4742E2382689DC4318170B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number:          0466
Signing time:             Sat 07 Jun 2025 16:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:48 +0000
Files and hashes:         1: 0Yi_JnLw94TXhrC5nYi7nz8aE9Q.roa (hash: PcfAm6zv9EFMWgISV3l4XmKFXD7W1Vvh/DKcICx2Ck4=)
                          2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: pG6Ov7zreT8ipGhTr/6ObLMpZiQsfAAaVQ63QWZEsj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:8b:fa:bd:47:42:e2:38:26:89:dc:43:18:17:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
        Validity
            Not Before: Jun  7 16:00:48 2025 GMT
            Not After : Jun  8 16:00:48 2025 GMT
        Subject: CN=5f8d71dbfcb4b9a9f1d2187aa50c29a8da873cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dd:8a:cf:85:fd:c2:ff:ff:07:81:b9:a7:1b:
                    ec:02:b8:cf:d9:aa:c7:22:5c:c7:f1:51:4f:7a:7b:
                    05:24:d2:dd:d7:e9:b9:d4:b9:88:f7:a0:9f:5d:12:
                    29:04:d8:98:d8:b4:07:11:58:69:85:62:d5:b6:07:
                    1c:b6:5c:3c:0f:13:a6:f3:71:ef:63:3a:3d:5f:65:
                    25:3d:03:98:96:ae:d6:d8:4f:b8:12:bb:bd:df:8f:
                    88:65:0e:03:51:e4:64:68:20:a4:f6:2a:6f:e9:fc:
                    9d:b6:82:ca:1a:10:c2:15:6d:b2:74:54:53:9c:e1:
                    99:d2:24:59:c9:eb:2f:b2:e9:88:62:6f:15:6b:c3:
                    48:52:ff:42:ca:73:93:db:fa:43:9d:3b:a3:e7:c1:
                    12:53:1a:1d:a0:a2:db:c5:10:16:38:c6:c7:dd:bb:
                    64:33:0c:78:ea:a3:5b:14:c2:5b:92:9e:c4:7d:48:
                    11:d8:3c:01:35:d8:9f:0a:1a:6c:04:c2:9d:e2:dd:
                    9c:c6:18:5c:30:45:bf:6e:26:7c:99:13:aa:54:59:
                    15:9c:98:57:27:05:e3:30:76:c8:05:65:c8:8a:ed:
                    ca:70:05:db:53:d2:a4:4b:43:11:3d:83:71:54:c4:
                    1e:95:3a:f9:88:70:55:7a:b2:93:20:c5:f2:a5:a8:
                    b2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8D:71:DB:FC:B4:B9:A9:F1:D2:18:7A:A5:0C:29:A8:DA:87:3C:B0
            X509v3 Authority Key Identifier:
                keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:05:ef:91:36:07:44:d9:9b:4e:1a:84:82:ff:01:02:a8:91:
         60:cf:45:c0:0c:64:2d:46:7f:98:2b:16:1c:76:00:e1:70:06:
         67:02:6b:40:91:c1:85:0f:8f:0f:13:80:8b:c2:d0:b3:6e:de:
         e3:62:bf:4b:30:63:c0:18:4a:59:67:ed:67:5a:61:10:fa:42:
         9f:58:c5:8e:90:6c:7e:08:ce:60:1d:67:7e:7a:1b:5a:ea:c0:
         70:8a:fc:4e:fc:85:47:d1:e3:86:06:e3:19:24:61:78:d9:7f:
         27:14:d3:29:91:c6:e1:69:b4:cf:bb:01:6f:5f:28:7a:f2:e4:
         9c:2e:dd:9d:8c:ab:e7:68:21:d1:b1:dd:0f:8b:50:47:56:2b:
         ae:e2:47:e1:d2:57:19:07:5e:fb:61:85:0a:22:f3:e9:6b:83:
         4a:9f:5a:80:2f:cb:89:93:a6:7f:b2:a6:ef:c7:6f:3d:a6:1b:
         99:ce:35:df:18:4c:bd:c5:e6:21:3e:0a:06:77:ad:04:c5:ae:
         b5:44:4c:35:0e:40:d2:49:86:44:9e:69:9b:55:f4:c1:3c:02:
         eb:14:cd:5b:4b:85:a1:e5:18:6c:79:05:c6:0d:57:38:ff:28:
         f9:4b:a6:3f:83:60:ea:47:c0:49:87:44:c5:be:24:b7:13:12:
         bd:06:a4:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH4v6vUdC4jgmidxDGBcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjFhMTEzZDFiYTAxZDEwN2ZkZjc5MTMwOGMwYTUxZjNk
MDZkZGEwHhcNMjUwNjA3MTYwMDQ4WhcNMjUwNjA4MTYwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZjhkNzFkYmZjYjRiOWE5ZjFkMjE4N2FhNTBjMjlhOGRhODczY2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN2Kz4X9wv//B4G5pxvsArjP2arH
IlzH8VFPensFJNLd1+m51LmI96CfXRIpBNiY2LQHEVhphWLVtgcctlw8DxOm83Hv
Yzo9X2UlPQOYlq7W2E+4Eru934+IZQ4DUeRkaCCk9ipv6fydtoLKGhDCFW2ydFRT
nOGZ0iRZyesvsumIYm8Va8NIUv9CynOT2/pDnTuj58ESUxodoKLbxRAWOMbH3btk
Mwx46qNbFMJbkp7EfUgR2DwBNdifChpsBMKd4t2cxhhcMEW/biZ8mROqVFkVnJhX
JwXjMHbIBWXIiu3KcAXbU9KkS0MRPYNxVMQelTr5iHBVerKTIMXypaiyqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+Ncdv8tLmp8dIYeqUMKajahzywMB8GA1UdIwQY
MBaAFKwhoRPRugHRB/33kTCMClHz0G3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYt
ZmQ3M2I4MDgzM2I3LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYtZmQ3M2I4MDgzM2I3
LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgXvkTYH
RNmbThqEgv8BAqiRYM9FwAxkLUZ/mCsWHHYA4XAGZwJrQJHBhQ+PDxOAi8LQs27e
42K/SzBjwBhKWWftZ1phEPpCn1jFjpBsfgjOYB1nfnobWurAcIr8TvyFR9Hjhgbj
GSRheNl/JxTTKZHG4Wm0z7sBb18oevLknC7dnYyr52gh0bHdD4tQR1YrruJH4dJX
GQde+2GFCiLz6WuDSp9agC/LiZOmf7Km78dvPaYbmc413xhMvcXmIT4KBnetBMWu
tURMNQ5A0kmGRJ5pm1X0wTwC6xTNW0uFoeUYbHkFxg1XOP8o+UumP4Ng6kfASYdE
xb4ktxMSvQak5w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:26:58 2025 by rpki-client